BIT-magento-2020-9587
See a problem?- Import Source
- https://github.com/bitnami/vulndb/tree/main/data/magento/BIT-magento-2020-9587.json
- JSON Data
- https://api.osv.dev/v1/vulns/BIT-magento-2020-9587
- Aliases
- Published
- 2024-03-06T11:03:59.998Z
- Modified
- 2024-03-06T12:27:56.490741Z
- Summary
- [none]
- Details
-
Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have an authorization bypass vulnerability. Successful exploitation could lead to potentially unauthorized product discounts.
- Database specific
{ "cpes": [ "cpe:2.3:a:magento:magento:*:*:*:*:commerce:*:*:*", "cpe:2.3:a:magento:magento:*:*:*:*:community:*:*:*", "cpe:2.3:a:magento:magento:*:*:*:*:enterprise:*:*:*", "cpe:2.3:a:magento:magento:*:*:*:*:open_source:*:*:*" ], "severity": "High" }- References
Affected packages
Bitnami / magento
Package
- Name
- magento
- Purl
- pkg:bitnami/magento
Severity
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator